MANAGING ACCESS CONTROL 
WITHIN SYSTEM TOPOLOGIES 

USING CANONICAL ACCESS 
CONTROL REPRESENTATIONS 

Abstract of Disclosure 

Managing access control within system topologies by using canonical access 
control representations is disclosed. A set of accessor-accessible pairs is determined. 
f » Each accessor has a predetermined level of access to its paired accessible within a 

P system topology. For each unique accessible within the set of pairs, the accessors that 

flu 

b| are paired with it are sorted and merged as a first proto-zone. For each unique subset 

ik 

p(- of accessor(s) within the set of first proto-zones, the accessibles that are associated 

P with it are sorted and merged as a second proto-zone. The second proto-zones are 

s 

r • sorted to yield a canonical set of zones. Each zone has accessor(s) and accessible(s). 

iFj The canonical set of zones is used to manage the access control of the accessors and 

wf 

the accessibles within the topology. 
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